From: Duncaen <mail@duncano.de>
Date: Wed, 30 Jan 2019 22:35:25 +0000 (+0100)
Subject: shadow: clear phassphrase earlier
X-Git-Tag: v6.6~27
X-Git-Url: https://git.armaanb.net/?p=opendoas.git;a=commitdiff_plain;h=38e072b353f5b1325bbf52dfb759fe49ff6ef0f7

shadow: clear phassphrase earlier
---

diff --git a/shadow.c b/shadow.c
index 53877d5..71c71c6 100644
--- a/shadow.c
+++ b/shadow.c
@@ -70,14 +70,12 @@ shadowauth(const char *myname, int persist)
 		explicit_bzero(rbuf, sizeof(rbuf));
 		errx(1, "Authorization failed");
 	}
+	explicit_bzero(rbuf, sizeof(rbuf));
 	if (strcmp(encrypted, hash) != 0) {
-		explicit_bzero(rbuf, sizeof(rbuf));
 		syslog(LOG_AUTHPRIV | LOG_NOTICE, "failed auth for %s", myname);
 		errx(1, "Authorization failed");
 	}
 
-	explicit_bzero(rbuf, sizeof(rbuf));
-
 #ifdef USE_TIMESTAMP
 good:
 	if (fd != -1) {